curl --request GET \
  --url https://api.petrasecurity.com/beta/incidents \
  --header 'Authorization: Bearer <token>'

{
  "incidents": [
    {
      "id": "a1b2c3d4-5678-90ab-cdef-1234567890ab",
      "url": "https://app.petrasecurity.com/tenant/tenant-123/incidents/a1b2c3d4-5678-90ab-cdef-1234567890ab",
      "createdAt": "2026-03-15T14:30:00.000Z",
      "occurredAt": "2026-03-15T13:22:00.000Z",
      "remediationStatus": "REMEDIATED",
      "isLive": true,
      "dwellTimeMinutes": 67,
      "tenant": {
        "petraTenantId": "tenant-123",
        "name": "Acme Corporation",
        "microsoftTenantId": "abcd1234-5678-90ef-ghij-klmnopqrstuv"
      },
      "user": {
        "id": "user-id-1",
        "userPrincipalName": "john.doe@acmecorp.com",
        "mail": "john.doe@acmecorp.com",
        "displayName": "John Doe",
        "accountEnabled": true,
        "lastPasswordChangeDateTime": "2026-03-15T15:00:00.000Z"
      }
    }
  ]
}